Sequenced Path
HTTP Fundamentals
A structured learning path covering HTTP from first principles to production-ready patterns. Nine guides, ordered from beginner to intermediate.
Built for: Readers who want a sequential path through one topic from start to finish.
What you should get from this path
- Follow the material in a deliberate order.
- Build understanding progressively instead of jumping between isolated references.
Follow in order
Move through these entries in sequence for the clearest progression.
- Guides
What Is HTTP? How the HTTP Protocol Works
HTTP is the request-response protocol behind every web page and API. See a real request and response, then methods, headers, status codes and what HTTPS adds.
Part 1 · beginner in this sequenced learning path.
- Guides
Request and Response Lifecycle
Learn how HTTP requests travel from browser to server and back. Understand DNS resolution, TCP connections, request/response flow, and the complete lifecycle.
Part 2 · beginner in this sequenced learning path.
- Guides
HTTP Status Codes: Full List with Meanings
Every HTTP status code class from 1xx to 5xx with what each code means and when to return it, including the ones you meet most: 200, 301, 304, 404 and 500.
Part 3 · beginner in this sequenced learning path.
- Guides
HTTP Authentication Methods and Best Practices
A comprehensive guide to HTTP authentication methods including Basic Auth, Bearer tokens, API keys, and OAuth 2.0.
Part 4 · intermediate in this sequenced learning path.
- Guides
Cross-Origin Resource Sharing (CORS)
Master Cross-Origin Resource Sharing (CORS) for secure cross-origin HTTP requests. Learn preflight requests, headers, credentials, and common error solutions.
Part 5 · intermediate in this sequenced learning path.
- Guides
HTTPS Explained: How TLS Secures HTTP
HTTPS is HTTP over TLS. What the TLS handshake does, how certificates prove identity, what HTTPS hides and what it does not, and how to migrate a site safely.
Part 6 · intermediate in this sequenced learning path.
- Guides
HTTP Headers and Caching: A Practical Guide
Master HTTP caching with Cache-Control, ETag, Last-Modified, and conditional request headers. Learn how to optimize performance with proper cache strategies.
Part 7 · intermediate in this sequenced learning path.
- Guides
Cookie Security: HttpOnly, SameSite, and Secure Flags
A comprehensive guide to understanding and implementing secure HTTP cookies to protect against XSS, CSRF, and session hijacking attacks.
Part 8 · intermediate in this sequenced learning path.
- Guides
HTTP Sessions and State Management Explained
Learn how to manage user state and sessions in stateless HTTP applications using cookies, tokens, and server-side storage.
Part 9 · intermediate in this sequenced learning path.
- Guides
HTTP/3 and QUIC Explained: Setup, Fallback, 0-RTT
How HTTP/3 and QUIC work: UDP/443, connection IDs, 0-RTT replay risk, Alt-Svc and HTTPS DNS record discovery, nginx/Caddy/Cloudflare setup, and curl checks.
Part 10 · advanced in this sequenced learning path.
- Guides
HTTP Security Headers Checklist: Values and Configs
Which HTTP security headers to send and which to drop: starting values for CSP, HSTS and more, with nginx, Apache, Express, Next.js and Cloudflare config.
Part 11 · intermediate in this sequenced learning path.
More Learning Paths
- 12 linked
Debug HTTP Problems in Production
A pragmatic troubleshooting stack for the failures engineers see most often.
- 12 linked
Learn HTTP Fundamentals
A structured route through the core primitives, message flow, and debugging basics.
- 12 linked
Ship Secure Auth and Cookies
A security-focused path for login state, browser credentials, and defensive HTTP defaults.